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AMENDMENTS TO THE CLAIMS 



This listing of claims will replace all prior versions, and listings of claims in the 

RFCEIVED 

application: ni— ^ 

DtC 2 9 Z003 

LISTING OF CLAIMS 

Technology Center 2100 

1. (Original) A method for remote incremental program verification, said method 
comprising: 

receiving content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer^ a device issuer 

unit, each program unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition file defining items in 
its associated program unit that are made accessible to one or more other 



and a trusted post-issuance installe^said content including at least one program 



9^ 

program units, each implementation including executable code corresponding to 
!^ said API definition file, said executable code including type specific instructions 

^^Jx^^"^ dataj^d verification including determining binary compatibility of earlier 
program unit implementations with later program unit implementationsTj 
installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 

C allowing post-issuance installation of verified content on said resource-constrained 
^ device by said trusted post-issuance installer, said post-installation occurring 



after said issuance. 
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2. (Currently Amended) Th e method of claim 1 wher e in said verification furth e r 
comprises: 

A method for remote incremental program verification, said method comprising: 
receiving content verified by at least one content provider, said at least one 
content provider including an applet provider, a device manufacturer^^ 
device issuer and a trusted post-issuance installei\laid content including at 
least one program unit, each program unit comprising an Application 
Programming Interface (API) definition file and an implementation, each 
API definition file defining items in its associated program unit that are 
made accessible to one or more other program units, each implementation 
including executable code corresponding to said API definition file, said 
executable code including tvpe specific instructions and dataj^said 
verification including determining binarv compatibilitv of earlier program 



utiit implementations with later program unit implementations 



said 



verification further comprising: 

\ receiving a second version of said first program unit implementation 
and a second version of said first program unit API definition 
file, said second version being a revised version of said first 
version; 

verifying said second version of said first program unit 

implementation, including 
indicating a verification error when said second version of said first 



6 



Appl. No. 09/661,582 Docket No. SUN-P4182 

Amdt. dated: December 16, 2003 (811 173-0001 18) 

Reply to Office Action of October 6, 2003 

program unit implementation is not internally consistent; and 
indicating a verification error when said second version of said first 
program unit implementation is inconsistent with said second 
version of said first program unit API definition file; and 
verifying said second version of said first program unit 

implementation is binary compatible with said first version of 
said first program unit implementation, including indicating a 
verification error when said first version of said first program unit 
API definition file is incompatible with said second version of 
said first program unit API definition filer file;^ 

installing said content on a resource-constrained device; 

issuing said resource-constrained device to an end user; and 

fallowing post-issuance installation of verified content on said resource- 
constrained device by said trusted post-issuance installer)|said post- 
installation occurring after said issuance. 



3. (Original) The method of claim 2, further comprising: 

indicating a verification error when a second program unit implementation that 

references said first program unit is inconsistent with said first version of said 

first program unit API definition file; and 
indicating said second program unit implementation is verified with said second 

version of said first program unit API definition file when said second version of 

said first program unit implementation is compatible with said first version of 
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said first program unit implementation, 

4. (Original) The method of claim 3, further comprising: 

indicating said second program unit implementation is verified with said second 
version of said first program unit implementation when said second program 
unit implementation is verified with said second version of said first program 
unit API definition file. 

5. (Original) The method of claim 2 wherein said first version of said first program 
unit API definition file is binary compatible with said second version of said first 
program unit API definition file when said second version of said first program unit 
API definition file includes a superset of each element in said first version of said 
first program unit API definition file. 

6. (Original) The method of claim 2 wherein 

said trusted post-issuance installer verifies a new program unit; and 
said trusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 

7. (Original) The method of claim 6 wherein post-issuance verification is performed on 
a resource-rich device. 

8. . (Original) The method of claim 6 wherein post-issuance verification is performed on 
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a terminal device. 

9. (Original) The method of claim 6 wherein said verification is performed by the 
provider of said new program unit. 

10. (Original) The method of claim 6 wherein said verification is performed by said 
applet provider. 

11. (Original) The method of claim 6 wherein said verification is performed by said 
device manufacturer. 

12. (Original) The method of claim 6 wherein said verification is performed by said 
device issuer. 

13. (Original) The method of claim 6 wherein said verification is performed by said 
applet provider and said device manufacturer. 

14. (Original) The method of claim 6 wherein said verification is performed by said 
applet provider and said device issuer. 

15. (Original) The method of claim 6 wherein said verification is performed by said 
device manufacturer and said device issuer. 
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16. (Original) The method of claim 6 wherein said verification is performed by said 
applet provider, said device manufacturer and said device issuer. 

17. (Original) The method of claim 6 wherein said verification is performed by said 
applet provider, said device manufacturer, said device issuer and said trusted post- 
issuance installer, 

18. (Original) The method of claim 6 wherein said verification is performed by said 
device manufacturer, said device issuer and said trusted post-issuance installer. 

19. (Original) The method of claim 6 wherein said verification is performed by said 
device manufacturer and said trusted post-issuance installer. 

20. (Original) The method of claim 6 wherein said verification is performed by said 
device issuer and said trusted post-issuance installer. 

21. (Original) The method of claim 6 wherein post-issuance verification is performed on 
a resource-rich device. 

22. (Original) The method of claim 6 wherein post-issuance verification is performed on 
a terminal device. 

23. (Original) A method for remote incremental program verification, said method 
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comprising: 

receiving content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and an untrusted post-issuance installer, said content including at least one 
program unit, each program unit comprising an Application Programming 
Interface (API) definition file and an implementation, each API definition file 
defining items in its associated program unit that are made accessible to one or 
more other program units, each implementation including executable code 
corresponding to said API definition file, said executable code including type 
specific instructions and dataj^id verification including determining binary 
compatibility of earlier program unit implementations with later program unit 
implementations; 



installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 
allowing post-issuance installation of verified content on said resource-constrained 
device by said untrusted post-issuance installer, said post-installation occurring 
after said issuance. 

24. (Currently Amended) Tho method of claim 23 wherein said verification further 
comprises: 

A method for remote incremental program verification, said method comprising: 
receiving content verified by at least one content provider, said at least one 
content provider including an applet provider, a device manufacturer, a 
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device issuer and an untrusted post-issuance installer, said content including 
at least one program unit, each program unit comprising an Application 
Programming Interface (API) definition file and an implementation, each 
API definition file defining items in its associated program unit that are 
made accessible to one or more other program units, each implementation 
including executable code corresponding to said API definition file, said 
executable code including type specific instructions and data, said 
verification including determining binary compatibility of earlier program 
unit implementations with later program unit implementations, said 
verification further comprising: 

receiving a second version of said first program unit implementation 
and a second version of said first program unit API definition 
file, said second version being a revised version of said first 
version; and 

verifying said second version of said first program unit 

implementation, including 
determining whether said second version of said first program unit 

implementation is internally consistent; and 
determining whether said second version of said first program unit 

implementation is consistent with said second version of said first 

program unit API definition file; and 
verifying said second version of said first program unit 

implementation is binary compatible with said first version of 
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said first program unit implementation by comparing said first 
version of said first program unit API definition file and said 
second version of said first program unit API definition fi4e7 file; 
installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 
allowing post-issuance installation of verified content on said resource-constrained 
device by said untrusted post-issuance installer, said post-installation occurring 
after said issuance. 

25. (Original) The method of claim 24, further comprising: 

determining whether a second program unit implementation that references said first 
program unit is consistent with said first version of said first program unit API 
definition file; and 

indicating said second program unit implementation is verified with said second 

version of said first program unit API definition file when said second version of 
said first program unit implementation is compatible with said first version of 
said first program unit implementation. 

26. (Original) The method of claim 25, further comprising: 

indicating said second program unit implementation is verified with said second 
version of said first program unit implementation when said second program 
unit implementation is verified with said second version of said first program 
unit API definition file. 
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27. (Original) The method of claim 24 wherein said first version of said first program 
unit API definition file is binary compatible with said second version of said first 
program unit API definition file when said second version of said first program unit 
API definition file includes a superset of each element in said first version of said 
first program unit API definition file. 

28. (Original) The method of claim 24 wherein 

said untrusted post-issuance installer verifies a new program unit; and 
said untrusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 

29. (Original) The method of claim 24 wherein post-issuance verification is performed 
on a resource-rich device. 

30. (Original) The method of claim 24 wherein post-issuance verification is performed 
on a terminal device. \ 

31. (Original) The method of claim 24 wherein said verification is performed by the 
provider of said new program unit. 

32. (Original) The method of claim 24 wherein said verification is performed by said 
applet provider. 
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33. (Original) The method of claim 24 wherein saicf verification is perfomied by said 
device manufacturer. 

34. (Original) The method of claim 24 wherein said verification is performed by said 
device issuer. 

35. (Original) The method of claim 24 wherein said verification is performed by said 
applet provider and said device manufacturer. 

36. (Original) The method of claim 24 wherein said verification is performed by said 
applet provider and said device issuer. 

37. (Original) The method of claim 24 wherein said verification is performed by said 
device manufacturer and said device issuer. 

38. (Original) The method of claim 24 wherein said verification is performed by said 
applet provider, said device manufacturer and said device issuer. 

39. (Original) The method of claim 24 wherein said verification is performed by said 
applet provider, said device manufacturer, said device issuer and said untrusted post- 
issuance installer. 
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40. (Original) The method of claim 24 wherein said verification is performed by said 
device manufacturer, said device issuer and said untrusted post-issuance installer. 

41. (Original) The method of claim 24 wherein said verification is performed by said 
device manufacturer and said untrusted post-issuance installer. 

42. (Original) The method of claim 24 wherein said verification is performed by said 
device issuer and said untrusted post-issuance installer. 

43. (Original) The method of claim 24 wherein post-issuance verification is performed 
on a resource-rich device. 

44. (Original) The method of claim 24 wherein post-issuance verification is performed 
on a terminal device. 

45. (Original) A program storage device readable by a machine, embodying a program 
of instructions executable by the machine to perform program verification, 
comprising: 

receiving content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and a trusted post-issuance installer, said content including at least one program 
unit, each program unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition file defining items in 
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its associated program unit that are made accessible to one or more other 
program units, each implementation including executable code corresponding to 
said API definition file, said executable code including type specific instructions 
and data,^|aid verification including determining binary compatibility of earlier 
program unit implementations with later program unit implementations; / 



device by said trusted post-issuance installer, said post-installation occurring 
after said issuance. 

46. (Currendy Amended) The program storage device of claim 15 wherein said 
verification further comprises: 

A proeram storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform program verification, 
comprising: 

receiving content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and a trusted post-issuance installer, said content including at least one program 
unit, each program unit comprising an Application Progranmiing Interface (API) 
definition file and an implementation, each API definition file defining items in 
its associated program unit that are made accessible to one or more other 
program units, each implementation including executable code corresponding to 




installing said content on a resource-constrained device; 



issuing said resource-constrained device to an end user; and 



allowing post-issuance installation of verified content on said resource-constrained 
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said API definition file, said executable code including type specific instructions 

and data, said verification including determining binary compatibility of earlier 

program unit implementations with later program unit implementations, said 

verification further comprising: 

receiving a second version of said first program unit implementation and a 
second version of said first program unit API definition file, said second 
version being a revised version of said first version; 

verifying said second version of said first program unit implementation, 
including 

indicating a verification error when said second version of said first program 

unit implementation is not internally consistent; and 
indicating a verification error when said second version of said first program 
unit implementation is inconsistent with said second version of said first 
program unit API definition file; and 
verifying said second version of said first program unit implementation is binary 
compatible with said first version of said first program unit implementation 
including indicating a verification error when said first version of said first 
program unit API definition file is incompatible with said second version of 
said first program unit API definition filer file; 
installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 
allowing post-issuance installation of verified content on said resource-constrained 
device by said trusted post-issuance installer, said post-installation occurring 
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after said issuance. 

47. (Original) The program storage device of claim 46, further comprising: 
indicating a verification error when a second program unit implementation that 

references said first program unit is inconsistent with said first version of said 
first program unit API definition file; and 
indicating said second program unit implementation is verified with said second 

version of said first program unit API definition file when said second version of 
said first program unit implementation is compatible with said first version of 
said first program unit implementation. 

48. (Original) The program storage device of claim 47, further comprising: 
indicating said second program unit implementation is verified with said second 

version of said first program unit implementation when said second program 
unit implementation is verified with said second version of said first program 
unit API definition file. 

49. (Original) The program storage device of claim 46 wherein said first version of said 
first program unit API definition file is binary compatible with said second version 
of said first program unit API definition file when said second version of said first 
program unit API definition file includes a superset of each element in said first 
version of said first program unit API definition file. 
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50. (Original) The program storage device of claim 46 wherein 

said trusted post-issuance installer verifies a new program unit; and 
said trusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 

51. (Original) The program storage device of claim 50 wherein post-issuance 
verification is performed on a resource-rich device. 

52. (Original) The program storage device of claim 50 wherein post-issuance 
verification is performed on a terminal device. 



53. (Original) The program storage device of claim 50 wherein said verification is 
performed by the provider of said new program unit. 



54. (Original) A program storage device readable by a machine, embodying a program 
of instructions executable by the machine to perform program verification, 
comprising: 

receiving content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and an untrusted post-issuance installer, said content including at least one 
program unit, each program unit comprising an Application Programming 
Interface (API) definition file and an implementation, each API definition file 
defining items in its associated program unit that are made accessible to one or 
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more other program units, each implementation including executable code 

corresponding to said API definition file, said executable code including type 

specific instructions and dataj^said verification including determining binary 

compatibility of earlier program unit implementations with later program unit 

implementations; 



installing said content on a resource-constrained device; 

issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained 

device by said untrusted post-issuance installer, said post-installation occurring 

after said issuance. 

55. (Currently Amended) The program storag e devic e of claim 5^ wherein said 
verification further compris e s: 

A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform program verification, 
comprising: 

receiving content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and an untrusted post-issuance installer, said content including at least one 
program unit, each program unit comprising an Application Programming 
Interface (API) definition file and an implementation, each API definition file 
defining items in its associated program unit that are made accessible to one or 
more other program units, each implementation including executable code 
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corresponding to said API definition file, said executable code including type 

specific instructions and data, said verification including determining binary 

compatibility of earlier program unit implementations with later program unit 

implementations, said verification further comprising: 

receiving a second version of said first program unit implementation and a 

second version of said first program unit API definition file, said second 

version being a revised version of said first version; and 

verifying said second version of said first program unit implementation, 

including 

indicating a verification error when said second version of said first program 

unit implementation is not internally consistent; and 
indicating a verification error when said second version of said first program 
unit implementation is inconsistent with said second version of said first 
program unit API definition file; and 
verifying said second version of said first program unit implementation is binary 
compatible with said first version of said first program unit implementation 
including indicating a verification error when said first version of said first 
program unit API definition file is incompatible when said second version 
of said first program unit API definition filer file; 
installing said content on a resource-constrained device: 
issuing said resource -constrained device to an end user; and 
allowing post-issuance installation of verified content on said resource-constrained 
device by said untrusted post-issuance installer, said post-installation occurring 
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after said issuance. 

56. (Original) The program storage device of claim 55, further comprising: 
indicating a verification error when a second program unit implementation that 

references said first program unit is inconsistent with said first version of said 
first program unit API definition file; and 
indicating said second program unit implementation is verified with said second 

version of said first program unit API definition file when said second version of 
said first program unit implementation is compatible with said first version of 
said first program unit implementation. 

57. (Original) The program storage device of claim 56, further comprising: 
indicating said second program unit implementation is verified with said second 

version of said first program unit implementation when said second program 
unit implementation is verified with said second version of said first program 
unit API definition file. 



58. (Original) The program storage device of claim 55 wherein said first version of said 
first program unit API definition file is binary compatible with said second version 
of said first program unit API definition file when said second version of said first 
program unit API definition file includes a superset of each element in said first 
version of said first program unit API definition file. 
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59. (Original) The program storage device of claim 55 wherein 

said untrusted post-issuance installer verifies a new program unit; and 
said untrusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 

60. (Original) The program storage device of claim 55 wherein post-issuance 
verification is performed on a resource-rich device. 

61. (Original) The program storage device of claim 55 wherein post-issuance 
verification is performed on a terminal device. 



62. (Original) The program storage device of claim 55 wherein said verification is 
performed by the provider of said new program unit. 

63. (Original) A system for executing a software application, the system comprising: 

a computing system that generates executable code, comprising means for receiving 
content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and a trusted post-issuance installer, said content including at least one program 
unit, each program unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition file defining items in 
its associated program unit that are made accessible to one or more other 
program units, each implementation including executable code corresponding to 
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said API definition file, said executable code including type specific instructions 



program unit implementations with later program unit implementations; J| 
means for installing said content on a resource-constrained device; 
means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said trusted post-issuance installer, said post-installation 
occurring after said issuance. 

64. (Currently Amended) The system of claim 63 wh e rein said verification further 
comprises: 

A system for executing a software application, the system comprising: 
a computing system that generates executable code, comprising means for receiving 
content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and a trusted post-issuance installer, said content including at least one program 
unit, each program unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition file defining items in 
its associated program unit that are made accessible to one or more other 
program units, each implementation including executable code corresponding to 
said API definition file, said executable code including type specific instructions 
and data, said verification including determining binary compatibility of earlier 
program unit implementations with later program unit implementations, said 



and data, said verification includin; 




binary compatibility of earlier 
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computing system further comprising: 

means for receiving a second version of said first program unit implementation 
and a second version of said first program unit API definition file, said 
second version being a revised version of said first version; 

means for verifying said second version of said first program unit 
implementation, including 

means for indicating a verification error when said second version of said first 
program unit implementation is not internally consistent; and 

means for indicating a verification error when said second version of said first 
program unit implementation is inconsistent with said second version of 
said first program unit API definition file; and 

means for verifying said second version of said first program unit 

implementation is binary compatible with said first version of said first 
program unit implementation including indicating a verification error when 
said first version of said first program unit API definition file is 
• incompatible with said second version of said first program unit API 
definition fUer file; 
means for installing said content on a resource-constrained device; 
means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said trusted post-issuance installer, said post-installation 

occurring after said issuance. 
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65. (Original) The system of claim 64, further comprising: 

means for indicating a verification error when a second program unit implementation 
that references said first program unit is inconsistent with said first version of 
said first program unit API definition file; and 

means for indicating said second program unit implementation is verified with said 
second version of said first program unit API definition file when said second 
version of said first program unit implementation is compatible with said first 
version of said first program unit implementation. 

66. (Original) The system of claim 65, further comprising: 

means for indicating said second program unit implementation is verified with said 
second version of said first program unit implementation when said second 
. program unit implementation is verified with said second version of said first 
program unit API definition file. 

67. (Original) The system of claim 64 wherein said first version of said first program 
unit API definition file is binary compatible with said second version of said first 
program unit API definition file when said second version of said first program unit 
API definition file includes a superset of each element in said first version of said 
first program unit API definition file. 

68. (Original) The system of claim 64 wherein 

said trusted post-issuance installer verifies a new program unit; and 
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said trusted post-issuance installer installs said verified new program unit on said . 
resource-constrained device. 



69. (Original) The system of claim 68 wherein post-issuance verification is performed 
on a resource-rich device. 



70. (Original) The system of claim 68 wherein post-issuance verification is performed 
on a terminal device. 

71. (Original) The system of claim 68 wherein said verification is performed by the 
provider of said new program unit. 

72. (Original) The system of claim 68 wherein said verification is performed by said 
applet provider. 

73. (Original) A system for executing a software application, the system comprising: 

a computing system that generates executable code, comprising means for receiving 
content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and an untrusted post-issuance installer, said content including at least one 
program unit, each program unit comprising an Application Programming 
Interface (API) definition file and an implementation, each API definition file 
defining items in its associated program unit that are made accessible to one or 



28 




Appl. No. 09/661,582 

Amdt. dated: December 16, 2003 

Reply to Office Action of October 6, 2003 



Docket No. SUN-P4182 
(811173-000118) 



more other program units, each implementation including executable code 



corresponding to said API definition file, said executable code including type 



specific instructions and dat^^id verification including determining binary 
compatibility of earlier program unit implementations with later program unit 
implementations; \ 



means for installing said content on a resource-constrained device; 
means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said untrusted post-issuance installer, said post- 



installation occurring after said issuance. 

74. (Currently Amended) The system of claim 73 wherein said verification furth e r 
comprises: 

A svstem for executing a software application, the svstem comprising: 
a computing system that generates executable code, comprising means for receiving 
content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer 
and an untrusted post-issuance installer, said content including at least one 
program unit, each program unit comprising an Application Programming 
Interface (API) definition file and an implementation, each API definition file 
defining items in its associated program unit that are made accessible to one or 
more other program units, each implementation including executable code 
corresponding to said API definition file, said executable code including type 
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Specific instructions and data, said verification includine determining binary 
compatibility of earlier program unit implementations with later program unit 
implementations, said computing system further comprising: 
means for receiving a second version of said first program unit implementation 
and a second version of said first program unit API definition file, said 
second version being a revised version of said first version; 
means for verifying said second version of said first program unit 

implementation, including 
means for indicating a verification error when said second version of said first 

program unit implementation is not internally consistent; and 
means for indicating a verification error when said second version of said first 
program unit implementation is inconsistent with said second version of 
said first program unit API definition file; and , 
means for verifying said second version of said first program unit 

implementation is binary compatible with said first version of said first 
program unit implementation including indicating a verification error when 
said first version of said first program unit API definition file is 
incompatible with said second version of said first program unit API 
definition fiiez file; 
means for installing said content on a resource-constrained device: 
means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said untrusted post-issuance installer, said post- 
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installation occurring after said issuance. 

75. (Original) The system of claim 74, further comprising: 

means for indicating a verification error when a second program unit implementation 
that references said first program unit is inconsistent with said first version of 
said first program unit API definition file; and 

means for indicating said second program unit implementation is verified with said 
second version of said first program unit API definition file when said second 
version of said first program unit implementation is compatible with said first 
version of said first program unit implementation. 

76. (Original) The system of claim 75, further comprising: 

means for indicating said second program unit implementation is verified with said 
second version of said first program unit implementation when said second 
program unit implementation is verified with said second version of said first 
program unit API definition file. 

77. (Original) The system of claim 74 wherein said first version of said first program 
unit API definition file is binary compatible with said second version of said first 
program unit API definition file when said second version of said first program unit 
API definition file includes a superset of each element in said first version of said 
first program unit API definition file. 
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78. (Original) The system of claim 74 wherein 

said untrusted post-issuance installer verifies a new program unit; and 
said untrusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 

79. (Original) The system of claim 74 wherein post-issuance verification is performed 
on a resource-rich device. 

80. (Original) The system of claim 74 wherein post-issuance verification is performed 
on a terminal device. 



81. (Original) The system of claim 78 wherein said verification is performed by the 
provider of said new program unit. 

82. (Original) A resource-constrained device, comprising: 

memory for providing content verified by at least one content provider, said at least 
one content provider including an applet provider, a device manufacturer, a 
device issuer and a trusted post-issuance installer, said content including at least 
one program unit, each program unit comprising an Application Progranmiing 
Interface (API) definition file and an implementation, each API definition file 
defining items in its associated program unit that are made accessible to one or 
more other program units, each implementation including executable code 
corresponding to said API definition file, said executable code including type 



32 



Appl. No. 09/661,582 . Docket No. SUN-P4182 

Amdt. dated: December 16, 2003 (811173-000118) 
Reply to Office Action of October 6, 2003 

specific instructions and data,| ^aid verification including determining binary 
compatibility of earlier program unit implementations with later program unit 
implementations^^ 

an installer device for installation of said content on said resource-constrained 
device, said installation including installation of initial content and installation 
of additional content by said trusted post-issuance installer after said resource- 
constrained device is issued to an end user; and 

a virtual machine that is capable of executing instructions included within said 
content. 

83. (Original) The resource-constrained device of claim 82 wherein said resource- 
constrained device comprises a smart card. 

84. (Original) The resource-constrained device of claim 83 wherein said virtual machine 
is Java Card™-compliant. 

85. (Original) A resource-constrained device, comprising: 

memory for providing content verified by at least one content provider, said at least 
one content provider including an applet provider, a device manufacturer, a 
device issuer and an untrusted post-issuance installer, said content including at 
least one program unit, each program unit comprising an Application 
Programming Interface (API) definition file and an implementation, each API 
definition file defining items in its associated program unit that are made 
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accessible to one or more other program units, each implementation including 
executable code corresponding to said API definition file, said executable code 
including type specific instructions and data, said verification including 
determining binary compatibility of earlier program unit implementations with 
later program unit implementations; J 

an installer device for installation of said content on said resource-constrained 
device, said installation including installation of initial content and installation 
of additional content by said untrusted post-issuance installer after said resource- 
constrained device is issued to an end user; and 

a virtual machine that is capable of executing instructions included within said 
content. 



86. (Original) The resource-constrained device of claim 85 wherein said resource- 
constrained device comprises a smart card. 

87. (Original) The resource-constrained device of claim 85 wherein said virtual machine 
is Java Card™-compliant. 
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